Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: eftqtqdvri6IMRZUfDwRKUFpRzXDnn8KHna7Yj7L4ak=
Subject key identifier: D4:04:83:24:65:67:D2:30:6A:1C:22:6E:43:89:1D:4F:E0:6D:7D:17
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 01974B56D566519679F8E2722085447F70A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 044A
Signing time: Sat 07 Jun 2025 17:01:11 +0000
Manifest this update: Sat 07 Jun 2025 17:01:11 +0000
Manifest next update: Sun 08 Jun 2025 17:01:11 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: lUtQ3BF5IMxUsF68lDsCp0sTDltFra8r2pnjxjcdZG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:d5:66:51:96:79:f8:e2:72:20:85:44:7f:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Jun 7 17:01:11 2025 GMT
Not After : Jun 8 17:01:11 2025 GMT
Subject: CN=d40483246567d2306a1c226e43891d4fe06d7d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:37:1f:af:5f:17:92:ca:ae:ab:9a:97:bb:
89:c4:89:5b:af:5d:d1:89:35:12:30:6d:ff:e0:87:
91:2b:cf:13:e3:1d:a7:47:61:aa:5d:df:ce:80:34:
09:8c:2f:c2:4a:ce:db:bf:d2:13:f1:f5:53:bb:8c:
59:ce:1f:55:16:8e:03:22:4d:36:ef:cd:96:9e:80:
56:bd:fa:ac:17:6d:3d:3d:12:6b:68:5f:1c:d8:47:
84:fd:82:d7:ea:63:bb:72:96:89:3a:a8:e1:85:a8:
30:f7:c0:b7:bd:63:b2:fc:66:78:48:51:f0:82:d9:
39:ff:e7:4e:0a:b1:48:76:6f:8b:b3:17:e5:6b:4c:
bb:7f:1b:e2:15:23:0c:99:5e:1f:ae:49:cc:a4:ff:
a2:10:cc:63:f2:9d:91:37:29:fc:26:e8:e9:e8:43:
a1:f7:a8:cb:ef:b8:2e:92:85:c4:bc:a4:4c:af:59:
8d:fe:21:57:c6:b6:08:de:60:2d:26:31:fc:a7:29:
e4:58:b1:e6:55:0e:f6:00:d4:a1:08:9b:c2:dd:33:
b6:7c:3e:b5:23:1d:3a:22:0a:10:6d:22:83:cd:b6:
c6:1b:3a:01:7f:de:f8:f7:c6:49:b5:71:54:94:1f:
70:e9:09:99:89:99:4c:03:c4:02:b1:14:2b:75:91:
14:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:83:24:65:67:D2:30:6A:1C:22:6E:43:89:1D:4F:E0:6D:7D:17
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:e8:bc:42:cc:d4:b1:33:d7:5f:13:5b:1b:a3:69:43:37:
19:41:51:99:38:9c:28:d7:60:f2:32:ad:65:a2:b4:0e:84:f9:
db:37:33:de:90:b7:70:06:1e:40:ba:36:0a:aa:b5:88:38:bd:
ae:da:f2:e9:7b:27:d0:0d:f0:12:88:c1:7c:ac:02:38:24:0a:
85:9e:d0:94:1a:ed:e4:4d:91:62:0c:de:b9:be:0d:2f:30:aa:
9a:87:10:a8:5a:07:b2:19:d0:81:4d:8c:0c:c2:6d:16:cb:02:
e3:cf:dc:6e:a3:58:5b:ab:72:47:75:1a:54:75:c6:7c:70:be:
6e:b2:08:f9:51:32:88:2d:8f:8f:f2:b8:46:04:ee:ae:91:f0:
9e:c7:ec:54:19:1a:6f:39:71:a9:63:a7:2d:48:37:d7:82:e3:
87:3d:49:62:b8:aa:5c:51:53:77:e6:8b:24:b2:5d:48:49:cc:
6a:02:e8:03:cf:31:e4:1d:c3:ea:16:fd:33:d5:0c:1e:48:8a:
f2:ca:37:de:5e:5f:89:8f:ed:a3:4d:b1:d5:2a:9d:04:40:3d:
51:e9:20:1b:d3:25:c4:5f:77:4d:64:f4:d2:28:2a:e4:21:d8:
cf:fd:b9:d0:8a:e6:ad:07:1d:f3:5c:92:48:6c:40:31:da:1e:
0d:56:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:29 2025 by rpki-client